[PATCH 1/2] corrected logrotate activation rule

David Smith dsmith at eclipse.ncsc.mil
Fri Oct 11 14:19:19 UTC 2013


---
 RHEL6/input/system/logging.xml |   16 ++++++++++++----
 1 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/RHEL6/input/system/logging.xml b/RHEL6/input/system/logging.xml
index ae319f6..1f88fa4 100644
--- a/RHEL6/input/system/logging.xml
+++ b/RHEL6/input/system/logging.xml
@@ -357,13 +357,21 @@ used.</description>
 
 <Rule id="ensure_logrotate_activated">
 <title>Ensure Logrotate Runs Periodically</title>
-<description>The <tt>logrotate</tt> service should be
-enabled.</description>
+<description>The <tt>logrotate</tt> utility allows for the automatic rotation of 
+log files.  The frequency of rotation is specified in <tt>/etc/logrotate.conf</tt>, 
+which triggers a cron task.  To configure logrotate to run daily, add or correct 
+the following line in <tt>/etc/logrotate.conf</tt>:
+<pre># rotate log files <i>frequency</i>
+daily</pre>
+</description>
 <rationale>Log files that are not properly rotated run the risk of growing so large
 that they fill up the /var/log partition. Valuable logging information could be lost
 if the /var/log partition becomes full.</rationale>
-<ocil>
-<service-enable-check-macro service="logrotate" />
+<ocil clause="logrotate is not configured to run daily">
+To determine the status and frequency of logrotate, run the following command:
+<pre># grep logrotate /var/log/cron*</pre>
+If logrotate is configured properly, output should include references to 
+<tt>/etc/cron.daily</tt>.
 </ocil>
 <ident cce="27014-0" />
 <oval id="logrotate_rotate_all_files" />
-- 
1.7.1



More information about the scap-security-guide mailing list